$ rpki-client -vvf repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft File: 69D341364BC344B4ED6B3A65031AACB403AB3222.mft (raw, json) Hash identifier: CrB1VgUhZ/VOIlN4pwfwHjKTp+WUrM3gbjpUN6krQ90= Subject key identifier: 30:EE:6C:C7:5F:05:1D:E5:3F:93:42:73:F7:F0:0D:BF:3E:3C:23:8F Authority key identifier: 69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 Certificate issuer: /CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Certificate serial: 7D7A9B354D40A4129627FA63C3263123367F63B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject info access: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft Manifest number: 0500 Signing time: Fri 22 Aug 2025 05:41:24 +0000 Manifest this update: Fri 22 Aug 2025 05:36:24 +0000 Manifest next update: Mon 25 Aug 2025 17:17:24 +0000 Files and hashes: 1: 69D341364BC344B4ED6B3A65031AACB403AB3222.crl (hash: /VbhGRt9iDWRmltaWccs6HJ/axhNKyaLm7HA//Kj70U=) 2: 3130332e3130352e35322e302f32322d3234203d3e20313336383733.roa (hash: mEwVbYgiqYJGIGp+5J9MnWrl5gm8ToUUdLv1IaAGjLQ=) 3: 323430323a326134303a3a2f33322d3438203d3e20313336383733.roa (hash: /62nOK71rLN/rA80+Xk3S/HgS8HMB1l9OOKuRpOZFP0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 17:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:7a:9b:35:4d:40:a4:12:96:27:fa:63:c3:26:31:23:36:7f:63:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69D341364BC344B4ED6B3A65031AACB403AB3222 Validity Not Before: Aug 22 05:36:24 2025 GMT Not After : Aug 25 17:17:24 2025 GMT Subject: CN=30EE6CC75F051DE53F934273F7F00DBF3E3C238F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:49:8d:97:12:f9:77:f5:b9:aa:ea:3d:5a:c2: cc:13:4b:76:ba:5f:35:14:f5:76:cb:e1:4c:70:95: 12:ab:83:4c:70:46:9c:dd:de:e9:1c:0c:19:34:84: 50:e1:d3:7c:70:e3:c4:7a:1e:14:57:3d:0e:e1:b5: 71:a2:ea:20:ee:05:c3:60:07:94:e7:9f:fd:1a:10: fe:1f:54:a8:fa:85:d8:15:ac:dd:3b:2a:29:15:a7: 13:b3:70:22:12:48:ad:4c:d0:25:2d:89:cf:49:81: dd:08:a7:f3:17:3d:73:0d:0a:11:c4:75:7d:b1:5e: ef:91:cc:12:28:8e:2b:c6:50:0f:0b:17:ca:14:fd: 6e:59:53:34:fd:14:d4:77:f1:0a:d3:25:46:14:96: 26:91:af:df:b5:1f:89:6d:0d:ce:24:59:40:e5:cf: ad:bf:08:c4:f4:ef:cf:1c:8d:49:c7:64:3e:37:0f: ca:ab:94:34:f1:18:9d:b5:4b:3f:38:88:ae:0c:59: 2d:a7:bb:48:4e:40:02:06:02:e5:aa:b8:fb:02:0d: 4f:db:89:83:f0:0d:b7:76:24:a7:ae:3f:36:25:91: d5:75:3e:1f:7c:59:1f:47:9f:7e:46:66:4d:74:78: 35:95:ed:e2:9a:0c:b8:70:c6:4f:ad:01:6f:81:15: ac:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:EE:6C:C7:5F:05:1D:E5:3F:93:42:73:F7:F0:0D:BF:3E:3C:23:8F X509v3 Authority Key Identifier: keyid:69:D3:41:36:4B:C3:44:B4:ED:6B:3A:65:03:1A:AC:B4:03:AB:32:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69D341364BC344B4ED6B3A65031AACB403AB3222.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657a6bcb-9eb6-49de-b998-0bed3c5c1278/0/69D341364BC344B4ED6B3A65031AACB403AB3222.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:6c:10:c9:a5:bf:ef:1c:00:b1:42:36:e4:59:b6:75:f5:cc: 3d:c2:84:a9:f4:a5:0c:66:81:1c:6a:9e:e6:10:80:9d:24:c1: 41:98:f8:fa:e5:06:b1:25:03:7a:0b:90:2a:ca:e9:71:bf:2a: ec:80:af:9c:25:fa:c7:0d:98:46:29:00:4f:19:ff:48:a9:55: 9a:4b:71:26:f0:27:59:d8:f1:6a:ce:91:75:09:16:58:84:3e: cf:b3:44:0e:5f:59:56:a1:a0:f9:0b:80:50:4c:b8:0b:9b:c3: 05:0b:33:15:c2:71:8b:22:98:e2:c4:1a:0f:72:67:d2:f8:ec: 2b:28:dc:69:bc:46:f7:cf:29:f2:25:81:92:7f:3f:6d:98:28: c5:66:c7:0a:8c:e3:ae:28:76:c6:17:96:62:f4:4f:85:8a:4c: a2:d3:04:76:08:bd:d7:53:e3:7e:81:e3:be:a0:3c:24:98:4f: 1a:ff:49:bf:9a:db:c1:23:9f:e1:3a:1a:b8:1c:ac:36:4d:7c: 97:bd:d6:37:76:b6:96:d4:71:b8:38:49:51:6e:2c:1a:a6:65: 7a:f7:dc:b6:12:9d:cb:9c:b8:f4:85:36:2c:17:be:b3:a3:1c: f5:2a:5d:d2:de:b6:e2:c9:22:09:4c:8f:2d:0f:12:55:25:01: a8:bb:f2:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXqbNU1ApBKWJ/pjwyYxIzZ/Y7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQw M0FCMzIyMjAeFw0yNTA4MjIwNTM2MjRaFw0yNTA4MjUxNzE3MjRaMDMxMTAvBgNV BAMTKDMwRUU2Q0M3NUYwNTFERTUzRjkzNDI3M0Y3RjAwREJGM0UzQzIzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSY2XEvl39bmq6j1awswTS3a6 XzUU9XbL4UxwlRKrg0xwRpzd3ukcDBk0hFDh03xw48R6HhRXPQ7htXGi6iDuBcNg B5Tnn/0aEP4fVKj6hdgVrN07KikVpxOzcCISSK1M0CUtic9Jgd0Ip/MXPXMNChHE dX2xXu+RzBIojivGUA8LF8oU/W5ZUzT9FNR38QrTJUYUliaRr9+1H4ltDc4kWUDl z62/CMT0788cjUnHZD43D8qrlDTxGJ21Sz84iK4MWS2nu0hOQAIGAuWquPsCDU/b iYPwDbd2JKeuPzYlkdV1Ph98WR9Hn35GZk10eDWV7eKaDLhwxk+tAW+BFayfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMO5sx18FHeU/k0Jz9/ANvz48I48wHwYDVR0j BBgwFoAUadNBNkvDRLTtazplAxqstAOrMiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NTdhNmJjYi05ZWI2LTQ5ZGUtYjk5OC0wYmVkM2M1YzEyNzgvMC82OUQzNDEzNjRC QzM0NEI0RUQ2QjNBNjUwMzFBQUNCNDAzQUIzMjIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFDQjQwM0FC MzIyMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjU3YTZiY2ItOWViNi00OWRlLWI5 OTgtMGJlZDNjNWMxMjc4LzAvNjlEMzQxMzY0QkMzNDRCNEVENkIzQTY1MDMxQUFD QjQwM0FCMzIyMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1sEMmlv+8cALFCNuRZtnX1zD3ChKn0pQxm gRxqnuYQgJ0kwUGY+PrlBrElA3oLkCrK6XG/KuyAr5wl+scNmEYpAE8Z/0ipVZpL cSbwJ1nY8WrOkXUJFliEPs+zRA5fWVahoPkLgFBMuAubwwULMxXCcYsimOLEGg9y Z9L47Cso3Gm8RvfPKfIlgZJ/P22YKMVmxwqM464odsYXlmL0T4WKTKLTBHYIvddT 436B476gPCSYTxr/Sb+a28Ejn+E6GrgcrDZNfJe91jd2tpbUcbg4SVFuLBqmZXr3 3LYSncucuPSFNiwXvrOjHPUqXdLetuLJIglMjy0PElUlAai78rA= -----END CERTIFICATE-----Generated at Sat Aug 23 14:14:43 2025 by rpki-client